A server‑side request forgery flaw allows an attacker who has low privileges to trigger a recording session and access internal Chrome DevTools Protocol endpoints. This exposure reveals another user's JSON Web Token, which grants the attacker full read/write authority to that user's Whiteboard content. The vulnerability does not allow arbitrary code execution or direct system compromise, but it does enable persistent data theft and tampering within the affected application.

The flaw is found in Nextcloud's Whiteboard component. No specific product version numbers are listed in the CNA data, so all installations of the Whiteboard plugin that contain the vulnerable code are potentially affected.

The CVSS score of 4.6 classifies the severity as medium, and there is no EPSS data to quantify exploit likelihood; the vulnerability is not listed in the CISA KEV catalog. Because the attack requires no privileged access beyond the ability to start a recording, an attacker with limited permissions can repeatedly trigger the SSRF to obtain the token. The risk profile is moderate, but the impact on confidentiality and integrity of Whiteboard data warrants timely remediation.